This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MahtHL3R7r4xntC9mWshzg7WVRI.roa File: MahtHL3R7r4xntC9mWshzg7WVRI.roa (raw, json) Hash identifier: 6Cmg7Yrh/SoMcqGjaVRArUJ41Cks7jlinT666hwW2kM= Subject key identifier: 31:A8:6D:1C:BD:D1:EE:BE:31:9E:D0:BD:99:6B:21:CE:0E:D6:55:12 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759404AD2E4643E6ACBE24DB9D80281 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MahtHL3R7r4xntC9mWshzg7WVRI.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20616 IP address blocks: 89.34.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:40:4a:d2:e4:64:3e:6a:cb:e2:4d:b9:d8:02:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a86d1cbdd1eebe319ed0bd996b21ce0ed65512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:58:99:0b:2a:58:11:2e:16:e8:fb:68:f2: 1e:a7:0f:a7:0e:05:8a:2a:32:9b:13:36:41:b5:95: ab:0c:6c:eb:90:d1:0e:7c:38:09:81:a4:e1:ae:ee: cc:74:b8:e4:d8:4b:82:ed:b5:e0:bc:4d:f7:a0:2c: 52:3c:6f:0b:79:28:3b:9e:6c:32:9a:7d:8c:2b:38: a5:dc:75:1d:73:f0:e5:bc:23:e3:25:6d:c2:15:3e: b6:a6:08:cd:a0:e8:ba:10:ec:27:72:8e:03:f7:4c: ec:62:93:14:c3:fc:98:06:bf:69:91:1e:bf:5b:1a: d8:0c:7e:3a:48:70:d4:68:24:2a:be:3f:eb:c9:3d: e0:b2:91:0c:d2:a2:ab:20:1d:3e:e6:5a:f3:2c:dc: f2:f9:06:45:a6:a8:a5:db:4f:0e:b1:07:a3:16:de: f2:eb:3a:6d:00:5b:18:2b:0c:8c:0f:ba:cc:d9:21: f8:a9:a4:52:d1:c0:21:a0:6d:a8:26:f7:b6:f1:74: 68:db:3d:56:6b:ed:96:35:72:4e:8b:3f:b7:f8:aa: 36:27:77:62:70:7a:9a:90:a7:58:fb:1f:d3:fe:e6: 05:1a:7c:e9:09:d5:3e:b1:7a:4d:4e:40:3c:9e:25: 91:a5:85:51:3d:68:13:c5:6c:dd:ce:d0:ba:be:4e: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:6D:1C:BD:D1:EE:BE:31:9E:D0:BD:99:6B:21:CE:0E:D6:55:12 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MahtHL3R7r4xntC9mWshzg7WVRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.107.0/24 Signature Algorithm: sha256WithRSAEncryption b9:62:ce:22:a0:2a:0b:8a:a6:ae:00:6f:2f:64:33:9c:d0:6a: 29:ad:ac:12:51:cc:6f:84:db:3d:1a:d5:9c:84:a6:41:c2:af: a9:a3:a4:ca:c8:85:94:15:c0:60:a3:05:7d:8e:f8:cb:07:77: eb:a6:a6:4a:a9:f1:9b:7d:9c:e7:4e:92:72:7a:ea:ad:58:4a: 36:1b:5c:c1:c2:34:5d:cd:08:9a:1e:ee:08:16:ce:46:43:41: 37:e0:f2:12:04:68:15:4e:1d:96:d1:fe:42:c8:f4:2e:f3:ba: d9:bc:bb:3c:9c:d8:49:e7:fc:d2:93:b4:62:5c:4d:00:20:47: 92:fc:79:1b:3d:1c:41:ba:6f:16:c7:e3:76:6a:2f:96:f5:09: 24:44:5e:8f:67:7a:8b:49:89:b6:ca:6e:e4:f3:53:90:01:16: ba:73:33:c1:cc:46:24:2a:42:44:ec:2f:74:b4:73:0c:f2:6b: e8:ec:50:3f:0e:37:10:e3:ec:8d:a2:27:70:db:9b:17:00:eb: 4f:1d:d3:4f:b7:d5:dd:4f:a7:05:a4:2e:36:fd:99:2c:04:64: 45:93:98:63:33:86:c9:a4:95:79:74:79:19:ec:a0:43:51:a8: 23:e3:13:1f:53:ce:23:81:7a:5b:f8:bf:71:2e:ca:b6:69:5e: db:af:96:c8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUBK0uRkPmrL4k252AKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWE4NmQxY2JkZDFlZWJlMzE5ZWQwYmQ5OTZiMjFjZTBlZDY1NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1chYmQsqWBEuFuj7aPIepw+nDgWK KjKbEzZBtZWrDGzrkNEOfDgJgaThru7MdLjk2EuC7bXgvE33oCxSPG8LeSg7nmwy mn2MKzil3HUdc/DlvCPjJW3CFT62pgjNoOi6EOwnco4D90zsYpMUw/yYBr9pkR6/ WxrYDH46SHDUaCQqvj/ryT3gspEM0qKrIB0+5lrzLNzy+QZFpqil208OsQejFt7y 6zptAFsYKwyMD7rM2SH4qaRS0cAhoG2oJve28XRo2z1Wa+2WNXJOiz+3+Ko2J3di cHqakKdY+x/T/uYFGnzpCdU+sXpNTkA8niWRpYVRPWgTxWzdztC6vk60ywIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDGobRy90e6+MZ7QvZlrIc4O1lUSMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL01haHRITDNSN3I0eG50QzltV3Noemc3V1ZSSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZImsw DQYJKoZIhvcNAQELBQADggEBALliziKgKguKpq4Aby9kM5zQaimtrBJRzG+E2z0a 1ZyEpkHCr6mjpMrIhZQVwGCjBX2O+MsHd+umpkqp8Zt9nOdOknJ66q1YSjYbXMHC NF3NCJoe7ggWzkZDQTfg8hIEaBVOHZbR/kLI9C7zutm8uzyc2Enn/NKTtGJcTQAg R5L8eRs9HEG6bxbH43ZqL5b1CSREXo9neotJibbKbuTzU5ABFrpzM8HMRiQqQkTs L3S0cwzya+jsUD8ONxDj7I2iJ3DbmxcA608d00+31d1PpwWkLjb9mSwEZEWTmGMz hsmklXl0eRnsoENRqCPjEx9TziOBelv4v3EuyrZpXtuvlsg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:36 2026 by rpki-client